Veille CVE

Recherche « Wikimedia Foundation Mediawiki - CentralAuth Extension »

3 CVE

  1. CVE-2026-103442 7.2 Élevée

    The Wikimedia Foundation MediaWiki CentralAuth extension

    External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

  2. CVE-2026-103047 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - CentralAuth extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.

  3. CVE-2026-100244 7.5 Élevée

    Wikimedia Foundation Mediawiki - CentralAuth Extension

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki - CentralAuth Extension: from * before 1.46.1, 1.45.5, 1.43.10.